Thomas Bernard
|
0d7ccf1388
|
2019
|
2019-10-06 22:53:20 +02:00 |
Thomas Bernard
|
f200b1b7e8
|
netfilter_nft/nftpinhole.c: fix after function renames
nft_send_request() => nft_send_rule()
reflesh_nft_cache_filter() => refresh_nft_cache_filter()
|
2019-10-06 22:30:36 +02:00 |
Paul Chambers
|
913194cf75
|
Move print_rule to the file it's used in.
|
2019-10-06 21:47:50 +02:00 |
Paul Chambers
|
9d1680455e
|
cleanup some formatting inconsistencies
|
2019-10-06 21:38:58 +02:00 |
Thomas Bernard
|
4ac428cbc9
|
netfilter_nft: remove dead code
|
2019-10-06 21:25:03 +02:00 |
Paul Chambers
|
35fa178ec8
|
encapsulate debug printing of rules. keeps stack layout the same between debug & non-debug builds.
|
2019-10-06 21:15:25 +02:00 |
Paul Chambers
|
123e589266
|
establish persistent mnl/netlink socket at init_redirect (needs elevated privileges)
|
2019-10-05 22:39:05 +02:00 |
Thomas Bernard
|
174db857f8
|
fix end of file
|
2019-10-03 00:15:50 +02:00 |
Paul Chambers
|
7ea314412c
|
make rdr_name_type enum values more unique
|
2019-10-02 23:42:15 +02:00 |
Paul Chambers
|
b36a6e94f8
|
NFT_RULE_USERDATA is sized, not null-terminated. Must use strndup()
|
2019-10-02 23:42:15 +02:00 |
Paul Chambers
|
fda82bceef
|
remove lingering debug stuff, add my name to file headers
|
2019-10-02 13:08:22 -07:00 |
Paul Chambers
|
dcad93615f
|
set the family attribute on the chain
|
2019-10-01 01:12:10 -07:00 |
Paul Chambers
|
2a496a1c1c
|
Minimize attributes set if chain_op is not NFT_MSG_NEWCHAIN
|
2019-10-01 00:40:05 -07:00 |
Paul Chambers
|
6a53e6e765
|
use the same name for all three tables, like sshguard does
|
2019-09-30 11:20:16 -07:00 |
Paul Chambers
|
13b63da3fb
|
bump the priority of miniupnpd's forward chain, so it processes packets before other filter chains
|
2019-09-30 09:40:40 -07:00 |
Paul Chambers
|
75bdb777cf
|
rework nft-specific globals, create & destroy tables/chains at init & shutdown
|
2019-09-30 00:12:08 -07:00 |
Paul Chambers
|
48f2339759
|
parse_rule_cmp: promote repeated code in cases outside the switch
|
2019-09-27 21:25:34 -07:00 |
Paul Chambers
|
dbdaabd21e
|
insert omitted break statements causing compiler warnings
|
2019-09-27 21:00:28 -07:00 |
Thomas Bernard
|
d1d7059e75
|
fix file modes for nft_display.sh (chmod +x)
|
2019-09-02 00:57:49 +02:00 |
Paul Chambers
|
f24ca07640
|
Fix the error messages produced by nft_init.sh in normal operation. Simplify the script.
|
2019-08-31 23:22:30 -07:00 |
Paul Chambers
|
60b57a442a
|
Rework nft_removeall.sh to preserve nftables structures miniupnpd didn't add. Important for firewalld and sshguard co-existance.
|
2019-08-31 20:47:11 -07:00 |
Thomas Bernard
|
4f8a4abcd1
|
nftnlrdr: list_redirect_rule() only in DEBUG
|
2019-06-30 22:23:36 +02:00 |
Thomas Bernard
|
4e480a7c4e
|
nftnlrdr_misc.c: use syslog() instead of perror()
do not exit()
|
2019-06-30 22:02:15 +02:00 |
Thomas Bernard
|
9402b49456
|
update headers
|
2019-06-30 21:51:15 +02:00 |
Thomas Bernard
|
d8368f7651
|
test_nfct_get.c: openlog()
|
2019-06-30 21:50:55 +02:00 |
Thomas Bernard
|
9070e175d4
|
Merge remote-tracking branch 'svenauhagen/fixes/nftablesipv6'
|
2019-06-30 21:25:01 +02:00 |
Sven Auhagen
|
b377305db0
|
This commits fixes an error setting the NFT Chain in DNAT instead of Filter
|
2019-06-30 19:46:35 +02:00 |
Sven Auhagen
|
b581b5d8af
|
pinhole fixes
|
2019-06-28 11:02:19 +02:00 |
Sven Auhagen
|
f67f6ae5f0
|
NFTables fixes and scripts
This commit fixes the list detection and uses the inet chain for ipv4.
The scripts got reworked as well and a display script was added.
|
2019-06-25 09:44:51 +02:00 |
sven
|
ee84a3949d
|
Update nftnlrdr_misc.h
Fix compiler warnings
|
2019-06-13 21:34:52 +02:00 |
Sven Auhagen
|
00ff23c428
|
This commit fixes IPv4 and adds IPv6 pinhole to nftables.
Signed-off-by: Sven Auhagen <sven.auhagen@voleatech.de>
|
2019-06-12 23:09:20 +02:00 |
Thomas Bernard
|
765156b04a
|
nftnlrdr.c: fix indent and spaces before eol
|
2019-06-04 23:02:52 +02:00 |
Pali Rohár
|
a2baa36312
|
Fix compilation with nftables
Fixes #324
|
2018-09-06 17:44:41 +02:00 |
Nils Andreas Svee
|
181428e843
|
miniupnpd: add update_portmappings functions for nft
|
2018-07-14 19:59:26 +02:00 |
Nils Andreas Svee
|
5262990d8e
|
miniupnpd: support newer libnftnl versions
|
2018-07-01 23:50:12 +02:00 |
Thomas Bernard
|
42a5e2ae22
|
Merge remote-tracking branch 's1061123/nft_support' into nft_support
Conflicts:
miniupnpd/Makefile.linux_nft
miniupnpd/netfilter_nft/README.md
miniupnpd/netfilter_nft/nftnlrdr.c
miniupnpd/netfilter_nft/nftnlrdr_misc.c
|
2015-04-30 10:49:11 +02:00 |
Tomofumi Hayashi
|
8fedfdc4ae
|
Fix compiler warning.
|
2015-04-28 17:23:09 +09:00 |
Tomofumi Hayashi
|
a39365279c
|
Fix d_printf() compile error.
|
2015-04-28 17:22:46 +09:00 |
Tomofumi Hayashi
|
af3ac20395
|
Change printf to d_printf (only valid in case of -DDEBUG)
|
2015-04-28 17:13:09 +09:00 |
Tomofumi Hayashi
|
79d4028a93
|
Change message.
|
2015-04-28 17:13:08 +09:00 |
Tomofumi Hayashi
|
7948b7d754
|
Fix SEGV issue (due to invalid memory alloc case).
|
2015-04-28 17:13:08 +09:00 |
Tomofumi Hayashi
|
101c443192
|
Update README.md
Fix format.
|
2015-04-28 17:13:08 +09:00 |
Tomofumi Hayashi
|
73f02afca9
|
Remove .travis.yml and rename README.md
|
2015-04-28 17:13:08 +09:00 |
Tomofumi Hayashi
|
050845156a
|
Fix to remove rule with correct handle.
|
2015-04-28 17:13:07 +09:00 |
Tomofumi Hayashi
|
9e10d91347
|
Skip to parse rules not in miniupnpd chain.
|
2015-04-28 17:13:07 +09:00 |
Tomofumi Hayashi
|
e54c5ff773
|
Fix to get NAT port as uint16_t.
|
2015-04-28 17:13:07 +09:00 |
Tomofumi Hayashi
|
26a5c9a3aa
|
In case of remove filter, just remove one rule.
|
2015-04-28 17:13:07 +09:00 |
Tomofumi Hayashi
|
c2af2650d9
|
Add expr_set_reg_val_u16 for network port num.
|
2015-04-28 17:13:07 +09:00 |
Tomofumi Hayashi
|
7f57e686d0
|
Fix NAT issue (cannot snat/dnat actually).
Port number endian is failed.
|
2015-04-28 17:13:06 +09:00 |
Tomofumi Hayashi
|
01ecb49d0e
|
Add egress if index val and rename ifidx to ingress_ifidx.
|
2015-04-28 17:13:06 +09:00 |